PT-2025-9631

Name of the Vulnerable Software and Affected Versions Axis Communication VAPIX affected versions not specified Description A flaw was discovered in the VAPIX Device Configuration framework, potentially leading to an incorrect user privilege level in the VAPIX service account D-Bus API...

CVE-2025-0360: Incorrect Authorization

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API...